I have been running passbolt ce fine for at a couple of month but something went wrong after doing a docker pull and the “sudo docker-compose up --force-recreate --build passbolt”
Im running on Synology NAS with composer:
passboltdb:
container_name: passboltdb
image: mariadb:10.3
#image : mariadb:10.3.20
restart: always
environment:
MYSQL_RANDOM_ROOT_PASSWORD: “true”
MYSQL_DATABASE: “passbolt”
MYSQL_USER: “XXXXXXXXXXXXXXXXXXXXXX”
MYSQL_PASSWORD: “XXXXXXXXXXXXXXXXXXXXXX”
volumes:
- /volume2/docker/passbolt/db:/var/lib/mysql rw
networks:
- passbolt
passbolt:
container_name: passbolt
image: passbolt/passbolt:latest-ce
#Alternatively you can use rootless:
#image: passbolt/passbolt:latest-ce-non-root
restart: unless-stopped
depends_on:
- passboltdb
environment:
APP_FULL_BASE_URL: https://passbolt.davra.dk
DATASOURCES_DEFAULT_HOST: “passboltdb”
DATASOURCES_DEFAULT_USERNAME: “XXXXXXXXXXXXXXXXXXXXXX”
DATASOURCES_DEFAULT_PASSWORD: “XXXXXXXXXXXXXXXXXXXXXX”
DATASOURCES_DEFAULT_DATABASE: “passbolt”
EMAIL_TRANSPORT_DEFAULT_HOST: "smtp.gmail.com"
EMAIL_TRANSPORT_DEFAULT_PORT: "587"
EMAIL_TRANSPORT_DEFAULT_USERNAME: "XXXXXXXXXXXXXXXXXXXXXX"
EMAIL_TRANSPORT_DEFAULT_PASSWORD: "XXXXXXXXXXXXXXXXXXXXXX"
EMAIL_TRANSPORT_DEFAULT_TLS: "true"
volumes:
- /volume2/docker/passbolt/gpg:/etc/passbolt/gpg rw
- /volume2/docker/passbolt/jwt_volume:/etc/passbolt/jwt rw
- /volume2/docker/passbolt/images:/usr/share/php/passbolt/webroot/img/public rw
command: ["/usr/bin/wait-for.sh", "-t", "0", "passboltdb:3306", "--", "/docker-entrypoint.sh"]
ports:
- 8088:80
networks:
- passbolt
healthcheck
____ __ ____
/ __ \____ _____ ____/ /_ ____ / / /_
/ // / __ `/ / / __ / __ / / _/
/ / // ( | ) // / // / / /
// _,///./_//__/
Open source password manager for teams
Healthcheck shell
Environment
[PASS] PHP version 7.4.30.
[PASS] PCRE compiled with unicode support.
[PASS] The temporary directory and its content are writable and not executable.
[PASS] The logs directory and its content are writable.
[PASS] GD or Imagick extension is installed.
[PASS] Intl extension is installed.
[PASS] Mbstring extension is installed.
Config files
[PASS] The application config file is present
[WARN] The passbolt config file is missing in /etc/passbolt/
[HELP] Copy /etc/passbolt/passbolt.default.php to /etc/passbolt/passbolt.php
[HELP] The passbolt config file is not required if passbolt is configured with environment variables
Core config
[PASS] Debug mode is off.
[PASS] Cache is working.
[PASS] Unique value set for security.salt
[PASS] Full base url is set to
[PASS] App.fullBaseUrl validation OK.
[PASS] /healthcheck/status is reachable.
SSL Certificate
[PASS] SSL peer certificate validates
[PASS] Hostname is matching in SSL certificate.
[PASS] Not using a self-signed certificate
Database
[PASS] The application is able to connect to the database
[PASS] 26 tables found
[PASS] Some default content is present
[PASS] The database schema up to date.
GPG Configuration
[PASS] PHP GPG Module is installed and loaded.
[PASS] The environment variable GNUPGHOME is set to /var/lib/passbolt/.gnupg.
[PASS] The directory /var/lib/passbolt/.gnupg containing the keyring is writable by the webserver user.
[FAIL] The server OpenPGP key is not set
[HELP] Create a key, export it and add the fingerprint to config/passbolt.php
[PASS] The public key file is defined in config/passbolt.php and readable.
[PASS] The private key file is defined in config/passbolt.php and readable.
[FAIL] The server key fingerprint doesn’t match the one defined in config/passbolt.php.
[HELP] Double check the key fingerprint, example:
[HELP] sudo su -s /bin/bash -c “gpg --list-keys --fingerprint --home /var/lib/passbolt/.gnupg” root | grep -i -B 2 ‘SERVER_KEY_EMAIL’
[HELP] SERVER_KEY_EMAIL: The email you used when you generated the server key.
[FAIL] The server public key defined in the config/passbolt.php (or environment variables) is not in the keyring
[HELP] Import the private server key in the keyring of the webserver user.
[HELP] you can try:
[HELP] sudo su -s /bin/bash -c “gpg --home /var/lib/passbolt/.gnupg --import /etc/passbolt/gpg/serverkey_private.asc” root
[FAIL] The server key does not have a valid email id.
[HELP] Edit or generate another key with a valid email id.
Application configuration
[FAIL] This installation is not up to date. Currently using 3.7.3 and it should be v3.8.0.
[PASS] Passbolt is configured to force SSL use.
[PASS] App.fullBaseUrl is set to HTTPS.
[PASS] Selenium API endpoints are disabled.
[PASS] Search engine robots are told not to index content.
[PASS] Registration is closed, only administrators can add users.
[PASS] Serving the compiled version of the javascript app
[PASS] All email notifications will be sent.
JWT Authentication
[PASS] The JWT Authentication plugin is enabled
[PASS] The /etc/passbolt/jwt/ directory is not writable.
[PASS] A valid JWT key pair was found
[FAIL] 5 error(s) found. Hang in there!
How do I fix the problem?
Best regards Jakob
